Lemon Pig — Privacy Policy

Last updated: July 8, 2026

Lemon Pig is a fruit identifier for iOS. This policy explains what the app does and doesn't do with your information. The short version: Lemon Pig has no accounts and no advertising, and the only data that ever leaves your device is a photo — or a fruit name — you deliberately choose to identify.

Information we do not collect

• We do not require an account and collect no name, email, or login.
• We do not use advertising or third-party analytics or tracking SDKs.
• We do not access your contacts, location, or device identifiers.
• We do not sell or share personal data with anyone for any purpose.

Photos you choose to identify

The app can identify a fruit from a photo you take with the camera or pick from your photo library. This only happens when you actively tap to identify. When you do:

• The single selected photo is downsized and sent over an encrypted (HTTPS) connection to our identification service (a Cloudflare Worker we operate), which forwards it to Anthropic's Claude API to recognize the fruit and, for fruits outside the built-in catalog, generate a description.
• Our identification service does not store your photo. It passes the image to Anthropic, returns the result to your app, and retains no copy.
• To prevent abuse, our service temporarily records a rate-limit counter keyed to your network (IP) address for roughly 25 hours. It is used only to cap the number of identifications per day and is not linked to your identity or to your photos.
• The photo is also held only in memory on your device during your session so it can be shown as the illustration for a freshly identified fruit. It is not written to storage by the app, and it is discarded when you close the app.

Anthropic processes the image to produce the identification. Anthropic's handling of API inputs is governed by its own terms and privacy policy; per Anthropic's API policies, inputs submitted through the API are not used to train its models. See Anthropic's Privacy Policy.

Fruit names you search

If you search for a fruit that isn't in the app's built-in catalog, the name you typed is sent over an encrypted (HTTPS) connection to the same identification service, which asks Claude to look the fruit up and write its profile. This works the same way as photo identification: the service passes your query along, returns the result, and the rate limit above applies.

Off-catalog discoveries we count

When an identification — from a photo or a search — turns out to be a fruit outside the built-in catalog, our service records the fruit's name and whether it was found by photo or by search, so future versions can add the fruits people actually look for. That's the whole record: no photo, no raw search text, and nothing that identifies you — it is never linked to your IP address, device, or session.

Your Claude API key (only if you use your own)

Some builds of Lemon Pig let you supply your own Anthropic API key instead of using our service. If you do, that key is stored only in your device's secure Keychain and is sent only to Anthropic to perform identification. We never receive, transmit, or store your personal key. You can remove it at any time by deleting the app.

Children's privacy

Lemon Pig is not directed to children under 13 and does not knowingly collect personal information from children.

Changes to this policy

If this policy changes, we will update the date at the top and post the revised version at this address.

Contact

Questions about this policy? Contact the developer at sadief@gmail.com.